[Snort-users] STEALTH ACTIVITY (unknown) detection

cc cc at ...9707...
Wed Jul 30 02:03:15 EDT 2003


IntegPatchMgr wrote:

> Hi,
> 
> Can any one let me know what below alert means ??
> 
> EVENT # :	531	
> EVENTLOG :	Application	
> EVENT TYPE :	INFORMATION (4)	
> SOURCE :	snort	
> EVENT ID :	1	
> TIME : 	7/28/2003 3:06:08 PM	
> MESSAGE : 	[111:1:1] (spp_stream4) STEALTH ACTIVITY (unknown)
> detection {TCP} 192.168.230.148:1570 -> 192.168.200.100:80 	
> 

I'd like to know myself.  I'm getting quite A LOT lately.




-- 
email: cc at ...9707...  | "A man who knows not where he goes,
                         |  knows not when he arrives."
                         |                - Anon


** All information contained in this email is strictly     **
** confidential and may be used by the intended receipient **
** only.                                                   **



More information about the Snort-users mailing list